Cybersecurity
Cybersecurity for Austin and Central Texas businesses
Keep the business moving and the systems protected. Cybersecurity sits with the same support group your team already calls.
Who it’s for
Security inside managed IT
We run cybersecurity inside managed IT for Austin and Central Texas organizations. That includes clinics, manufacturers, law firms, marketing firms, engineering firms, hi-tech companies, and other small and mid-size businesses.
We protect the email system, devices, and backups your team already uses. When plant, shop-floor, or production systems are part of the environment, that work sits in the same relationship.
- Clinics and other regulated practices. Patient information and clinic systems stay inside the same managed IT relationship with Healthcare IT or Secure IT.
- Manufacturers. Production lines and shop-floor systems stay segmented from office IT. Designs, recipes, and supplier files stay in approved tools and backups.
- Law firms. Client matter stays in approved tools, with a human in the loop where privilege requires it.
- Marketing firms. Customer lists and ad accounts stay in approved tools and backups.
- Engineering firms. Drawings, models, and client deliverables stay in approved repositories. Lab or production systems can sit in the same relationship.
- Hi-tech companies. Production systems, designs, and proprietary data stay in approved tools and backups.
- Other small and mid-size businesses. Mixed devices, email, and shared files stay inside managed IT.
- IT and production systems. Identity, email, and devices on the office side. Plant or shop-floor systems when the environment includes them.
What we cover
Threats we address
We treat the same surface we already operate: the Microsoft 365 tenant, email, endpoints, and backups. Most incidents start there — a weak sign-in, a mailbox forward, a lost laptop, or a backup nobody has restored.
We close those gaps in the tenant and on the devices you already run. MFA and Conditional Access for sign-in. DMARC, DKIM, and SPF for mail. Encryption and updates on managed Windows, Mac, iPhone, and iPad. Backups we have actually restored.
- Account takeover and weak identity — MFA gaps and Conditional Access blind spots
- Business-email compromise and look-alike mail — missing or weak DMARC, DKIM, and SPF
- Ransomware and untested backups — restore that has never been proven
- Lost or unmanaged Windows, macOS, iPhone, and iPad devices
- Oversharing and vendor/SaaS access that leaves matter, customer, or design data exposed
Monitoring
We watch identity, mail, endpoints, and backup jobs, and we route those alerts to someone who can act.
When something fires, we open a ticket, call the named owner, and stay with the mailbox, device, or backup job until it is back under control.
- Identity and Entra admin-role changes
- Mail authentication and suspicious forwarding
- Endpoint alerts on managed Windows, macOS, iPhone, and iPad
- Backup success and restore readiness
- A path from alert to a named owner
Controls
We run these on the tenant and devices you already use — the same relationship as helpdesk and Microsoft 365.
Sign-in is MFA and Conditional Access, with admin roles kept tight in Entra. Mail is authenticated with DMARC, DKIM, and SPF, and we watch forwarding so a quiet rule does not sit on a mailbox. Endpoints — Windows, Mac, iPhone, and iPad — stay updated, protected, and encrypted. Backups are tested so a restore is something we have done, not a setting we hope is on.
When plant or shop-floor systems are in the environment, we keep that OT side segmented from office IT.
See Microsoft 365 for how the tenant work is run day to day.
- MFA and Conditional Access
- Mailbox authentication and forwarding
- Endpoint protection and encryption
- Tested backup and recovery
Compliance
Most of our clients need the environment they already run to hold up when someone asks how patient data, shop-floor systems, or a contract is protected.
If you handle ePHI, HIPAA is in the relationship. See Healthcare IT. We use NIST CSF to walk through what you have, how you protect it, how you notice a problem, and how you get back to work.
CMMC belongs in the conversation when you sell into defense work. Texas Cybersecurity Safe Harbor (SB 2610) belongs in it for many Texas firms. ISO 27001, SOX, and PCI belong in it when those programs apply to you.
You keep the assessor and the attestation. We run the controls on your tenant, email, endpoints, and backups, and we sit with you when those questions come up.
- HIPAA when patient information is in the environment
- NIST CSF as the way we walk through the program
- CMMC when defense-supply work is in play
- Texas Cybersecurity Safe Harbor for Texas firms that want that safe harbor
- ISO 27001, SOX, or PCI when those programs apply
Services
Cybersecurity services
Each service below has its own page. Start with a cybersecurity assessment, and we will recommend the mix that fits your organization.
Cybersecurity Risk Assessment
A plain-language review of your security, with risks ranked and a practical plan.
Managed Detection & Response
24/7 monitoring and response on your laptops, desktops, and servers.
Security Monitoring (SIEM)
Logs from across your systems in one place, for visibility and compliance evidence.
Backup & Disaster Recovery
Tested backups, offsite copies, and a clear plan to recover fast.
Email Security
Protection from phishing, impersonation, and spoofing of your domain.
Security Awareness Training
Short lessons and phishing simulations, with training records on file.
Vulnerability Scanning & Penetration Testing
Scheduled scans, fixes in order of risk, and testing that proves what holds up.
Virtual CISO
Part-time security leadership for strategy, policies, and reporting.
Texas SB 2610 Compliance
The cybersecurity program Texas SB 2610 describes, built, run, and documented.
Which rules apply to you? Ten quick questions show which security rules and standards likely apply to your organization.
Packages
Remote IT
$100–$150 / user / month
Remote-first helpdesk, endpoints, and email. A technician can be dispatched when needed.
Unlimited remote support24/7 system monitoringVendor managementMonthly serviceQuarterly business reviews
Total IT
$150–$250 / user / month
Remote support plus a technician in the office when the request needs it.
Everything in Remote ITOn-site supportCybersecurity awareness trainingBusiness continuity planningEndpoint protection
Secure IT
$250–$400 / user / month
Everything in Total IT with tighter security and compliance built into the same support.
Everything in Total ITvCISO serviceBusiness continuity solutionEmail phishing security testingCybersecurity framework guidance
Resources
Guides
Plain-language guides to the rules Texas organizations ask us about.
Next step
Start with a review
A comprehensive review of your needs and growth plans looks at identity, email, devices, backups, and where the organization is going. We then map whether Total IT or Secure IT should carry the work.
